According to ISACA, the Certified in Risk and Information Systems Control CRISC designation aims to certify those professionals who have knowledge and experience in identifying and evaluating risk and in administering risk-based IS controls.
This is a relatively new certification, with these domains covered:
- Risk Identification, Assessment and Evaluation
- Risk Response
- Risk Monitoring
- Information Systems Control Design and Implementation
- Information Systems Control Monitoring and Maintenance
You donÕt have to be a CISA in order to go for this certification. However, knowledge covered by the CISA certification will be VERY USEFUL. In fact, this is an advanced level exam. If you do not have real world experience, you will not be able to pick the right answers for the corresponding scenarios.